![]() If you use the same password across multiple sites, be sure to change your password at all other sites as well.įollow on Twitter for the latest computer security news. If you have fallen for this scam, be sure to change your email password immediately. Now that’s closer to what I had expected to see in the first place from an email claiming to be from Norton.īoth forms – the fake AOL login and the fake Norton login – appear to collect a victim’s email address and password via a PHP script and then redirect the user to AOL or Norton’s homepage. ![]() Here’s what I found:Īha! There’s another directory named Norton. Out of curiosity, I browsed to the parent directory on the hacked domain hosting the fake AOL login. Could it be that the fake AOL link is only being sent those who received the scam email at an address? I have to wonder whether every recipient of these phishing emails is being redirected to a fake AOL login page. Hmmm, this email claims to be from Norton, but it takes me to an AOL login screen? An AOL login screen hosted on what appears to be a hacked domain instead of at at aol.com? On an unencrypted connection instead of over HTTPS? This seems more than a little suspicious.Īnd what exactly does it mean for an “e-mail address upgraded with the latest update” anyway?Īnother thing that may draw suspicion from savvy AOL users is that AOL has a partnership with McAfee, not Norton. ![]() If a recipient of this phishing e-mail fell for the scam and clicked on the link, he or she would be taken to a page that looks like this: In order to ensure your account remains active and protected to continue sending and receiving new messages, you will be required to immediately sign in again." "Your e-mail address was successfully upgraded with the latest Norton Antivirus update. Since the installation failed, Im hoping Im safe, but I wanted to check with the group and see what the best thing to do is. The scammer sent me some software to install and I double-clicked, but it didnt install. This morning I received a couple of phishing scam emails purporting to be from “Norton Symantec.” The fraudulent emails claimed, in part: I recently fell for an Norton billing email scam and I need to know what to do. As a security researcher, I occasionally get some interesting goodies in my old AOL inbox.
0 Comments
Leave a Reply. |